CVE-2026-98833
Received Received - Intake

Linux Kernel MTD Partition Reference Handling Vulnerability

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() passes the master. This breaks gluebi partitions because gluebi_get_device() uses container_of() and therefore requires the master MTD. Pass the master to _get_device(), matching _put_device().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98833
EUVD
EUVD-2026-103773

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 46b5889cc2c54bac7d7e727a44d28a298df23cef
Linux Linux 46b5889cc2c54bac7d7e727a44d28a298df23cef
Linux Linux 46b5889cc2c54bac7d7e727a44d28a298df23cef
Linux Linux 46b5889cc2c54bac7d7e727a44d28a298df23cef
Linux Linux 5.7

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's Memory Technology Device (MTD) subsystem. It involves a mismatch where __get_mtd_device() calls _get_device() with a partition MTD instead of the master MTD, while __put_mtd_device() uses the master MTD. This breaks gluebi partitions because gluebi_get_device() relies on container_of() which requires the master MTD.

Detection Guidance

This vulnerability is specific to the Linux kernel's MTD subsystem and does not have network-based detection methods. To detect it, check if your kernel version includes the affected code path by examining the MTD core implementation for improper handling of gluebi partitions. Review kernel logs for errors related to MTD device operations.

Impact Analysis

This vulnerability may cause gluebi partitions to malfunction or fail because the incorrect MTD is passed to device management functions. This could lead to filesystem corruption, data loss, or system instability on affected systems using MTD partitions.

Mitigation Strategies

Apply the latest kernel patches from your Linux distribution to resolve the issue. If patches are unavailable, avoid using gluebi partitions or disable them if possible. Monitor kernel logs for MTD-related errors as a potential indicator of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98833. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart